Last updated: November 25, 2025
Lift & Learn (the “App”) helps teams share workouts and learning updates. This policy explains what we collect, why we collect it, and how you can control your data.
- Account & Profile: Email address, display name, optional phone number, and avatar. Managed in Supabase
profiles. - App Content: Posts, replies, messages/DMs, channel messages, reactions/emojis, goals, weekly stats, and any media you upload (photos/videos are stored via Supabase storage).
- Team & Membership Data: Team memberships and roles; channel and DM participation.
- Device & Notifications: Firebase Cloud Messaging device tokens, platform (iOS/Android/Web) for push delivery; local notification settings/mute preferences.
- Usage/Security Logs: Standard server logs and audit data from our Supabase backend and Cloudflare edge functions (e.g., IP address, request timestamps) used for reliability and abuse prevention.
We do not collect precise location, health data, advertising identifiers, or payment information. We do not run third‑party advertising or cross‑app tracking.
- Provide core features (posts, chat/DMs, reactions, goals, teams).
- Send push notifications (messages, mentions, post/reaction alerts).
- Maintain safety, prevent abuse, and debug reliability issues.
- Improve the product using aggregate, de‑identified analytics (no ad tracking).
We share data only with service providers that power the app:
- Supabase (authentication, database, file storage, realtime streams).
- Firebase Cloud Messaging (push notifications to your devices).
- Cloudflare Workers (edge functions/notification fan‑out).
Content you post, react to, or message is visible to recipients (team members, channel participants, DM partners) according to in‑app permissions. We do not sell your data.
- Content and profile data are kept while your account remains active. You may delete posts/messages you control in the app.
- Push tokens are disabled when you log out or revoke notifications.
- You can request account deletion at any time; we will remove associated personal data unless retention is required by law or for security logs.
We encrypt data in transit (HTTPS). Supabase manages storage security and access controls; access to production data is limited to authorized personnel. No method is 100% secure, but we continuously monitor and patch services.
The app is not directed to children under 13. Do not use the service if you are under the minimum age in your region.
- Manage notification and mute settings in the app.
- Update profile info directly in the app.
- To delete your account or request a data export, contact us (see below).
We may update this policy; when we do, we’ll change the “Last updated” date and provide notice in‑app or by email when required.
Questions or requests: [email protected]